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Abstract 

This paper proves an instability theorem for dynamical systems. As one adds inter- 
actions between subystems in a complex system, structured or random, a threshold 
of connectivity is reached beyond which the overall dynamics inevitably goes un- 
stable. The threshold occurs at the point at which flows and interactions between 
subsystems ('surface' effects) overwhelm internal stabilizing dynamics ('volume' ef- 
fects). The theorem is used to identify instability thresholds in systems that possess 
a core-halo or core-periphery structure, including the gravo-thermal catastrophe - 
i.e., star collapse and explosion - and the interbank payment network. In the 
core-halo model, the same dynamical instability underlies both gravitational and 
financial collapse. 

A wide variety of work addresses the stability of dynamical systems made up of net- 
works of interacting subsystems [1-5] . A key ingredient of stability is network connectivity 
[5] . One of the best-known results in this field is May's theorem that differential equations 
described by random networks undergo a transition from stable to unstable behavior at 
a critical value of their connectivity [4]. As May himself noted [4], networks that occur 
in nature are rarely random: they typically possess complex structures related to their 
function [5]. This paper proves an instability theorem for dynamical systems described 



by structured, non-random networks and applies that theorem to dynamical systems that 
possess a dense core surrounded by a diffuse halo (the term used in astrophysics and 
elementary particle physics [6-8]) or periphery (the term used in economics and social 
sciences [9-12]). Two such systems are the interbank transfer network [9-10], and the net- 
work of gravitational interactions within a star [6-7]. As interactions are added between 
core and halo, the overall system inevitably goes unstable. 

The stability to instability transition identified in this paper arises because excess 
connectivity drives instability, not just for differential equations with random gradients 
as in [4], but for any set of coupled ordinary differential equations. Such sets of equations 
are ubiquitous in the mathematical modeling of dynamical systems, and can be applied 
to physical systems (e.g., Newtonian gravity, electrodynamics), networks of chemical re- 
actions, biological systems (e.g., ecological models and food webs), engineered systems 
(feedback control), and economic and financial systems (market economies, flows of money 
and debt). 

Interactions and instability 

Consider a set of non-linear, time-dependent, ordinary differential equations over n 
variables: 



where x = (xi, . . . ,x n ). The dynamics of a small perturbation Ax(t) to a solution x*(t) 
obeys the linearized equation 




(1) 



Ax = Vg\$*Ax. 



(2) 



The perturbation decreases in size if 



d_ 
dt 



Ax^Ax = Aff (V^ + Wg)Ax = 2Ax^GAx < 0, 



(3) 
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where G = (V<?* + Vg)/2 is the symmetrized Hermitian gradient evaluated at x*(t). The 
Hermitian part of the gradient governs exponentially increasing and decreasing behavior, 
while the anti-Hermitian part G = (Vg' — Vg)/2 governs oscillatory behavior. All per- 
turbations decrease in size if and only if the Hermitian gradient G is negative definite. 
The threshold of instability identified in this paper occurs at the point where interactions 
(off-diagonal terms in Vg and G) become sufficiently strong to make some eigenvalue of 
G positive, so that some perturbations grow in size. Note that the definition of stability 
adopted here - small perturbations decrease in size - is stronger than Lyapunov's defini- 
tion of stability, which demands only that small perturbations eventually decrease in size 
[1-2]. The stronger definition is adopted here because the largest eigenvalue of G typically 
grows in proportion to system size - once a large, complex system passes the stability 
threshold, perturbations grow large very rapidly, taking the nonlinear system to a new 
and unpredictable regime. 

The instability threshold identified here arises from excess of interaction. Off-diagonal 
terms in Vg govern interactions or flows of energy, entropy, money, etc., between sub- 
systems of the network, and on-diagonal terms represent sources and sinks of the same 
quantities. The internal dynamics of subsystems correspond to diagonal blocks of the gra- 
dient matrix of the linearized equations, while flows between subsystems correspond to 
off-diagonal blocks. Look at the interaction between two such subsystems. Subsystem A 
consists of ha variables, and subsystem B consists of n B > ua variables. Let Gab be the 
restriction of G to the subspace spanned by the n = riA + n B variables that describe A, B. 
Assume that A and B are locally stable in the absence of interaction, and investigate how 
that stability changes as interactions are added. The interactions between subsystems 
lead to stable dynamics if all the eigenvalues of the Hermitian matrix Gab are negative. 
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Write this matrix as 

G - = (c» b)- < 4 > 

where A gives the Hermitian dynamics confined to the subsystem A, and B gives the 
Hermitian dynamics for B. By the assumption of local stability, A and B are negative 
definite. C is an x n B matrix whose coefficients determine the strength of interactions 
between A and B. 

As more and more interactions are added, and as the strength of those interactions 
increase, then the interactions inevitably drive the system unstable. In particular, we 
have 

Theorem 1: If tr C^C > \ / tiA 2 \ / tiB 2 , then the system is unstable. 

Theorem 1 is a higher dimensional generalization of the fact that a 2 x 2 matrix ^ ^ 
where v < 0, has a positive eigenvalue if |A| 2 > fiu. 

Theorem 1 implies that the interacting systems are unstable when the average mag- 
nitude squared of the terms in the destabilizing interactions is larger than the geometric 
mean of the average magnitude squared of the terms in the stabilizing local dynamics. In- 
evitably, if the strength of the stabilizing local dynamics is fixed, increasing the strength 
of the interactions drives the system unstable beyond some threshold. Intuitively, the 
threshold occurs at the point where flows through the 'surface' between A and B dom- 
inate the 'volume' flows within A and B. Applied to random matrices representing the 
interactions between two parts of a complex system, theorem 1 reproduces the results of 
May [4] for connection-driven instability. However, no assumptions concerning random 
matrix theory were required to prove the theorem - the matrices involved can be highly 
structured. Theorem 1 will now be used to analyze several interaction-induced instability 
thresholds. 

4 



Core-halo instability and the gravo-thermal catastrophe 

A common type of system in the universe consists of a collection of matter, e.g. a cloud 
of interstellar dust, a star, or a cluster of stars in a galaxy, interacting via the gravitational 
force, augmented by collisions and heat production via, e.g., nuclear reactions. Such a 
system naturally forms itself into a dense 'core' (system A) of strongly interacting matter 
at high temperature, surrounded by a less-dense 'halo' (system £>). The microscopic 
dynamics of such a system are complex [6-7]. A simple linearized model of the energy 
transfer dynamics between A and B in terms of macroscopic variables takes the matrix 
form 

±(T A \ = {( V -a)/C A a/C A \(T A \ 

dt\T B ) \ a/C B (-l-a)/C B J\T B J- {0) 

Here, T A is the temperature of the core and C A is its specific heat. Similarly, T B and 

C B are the temperature and specific heat of the halo, a > gives the linearized rate of 

energy transfer between core and halo as a function of their temperature difference, rj > 

governs energy production in the core, due, e.g., to nuclear reactions, and 7 > governs 

heat loss from the halo to space beyond. 

The key feature of equation (4) is that the specific heat of systems whose dynamics is 

dominated by gravity is typically negative: when the hot core of tightly bound particles 

loses energy, the remaining particles cluster together more tightly and move faster. When 

C A < 0, demanding that the system be locally stable and below the interaction-driven 

instability threshold requires C B > and i] > a. That is, the overall system can still be 

stable if the specific heat of the halo is positive, so that like an ordinary gas it grows cooler 

as it loses energy, and if internal heat production in the core outweighs heat loss to the 

halo. As the internal rate of heat production slows - for example, as the nuclear reactions 

inside a star burn through their fuel - the system goes unstable at the critical threshold 

when rj becomes less than a. At this point destabilizing flows of energy from core to halo 
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dominate the stabilizing production of energy within the core. The temperature of the 
core now rises exponentially in time, with exponentially increasing flows of energy from 
core to halo. 

This accelerating, unstable flow of energy is called the gravo-thermal catastrophe [6]: 
from the dynamics (4) the gravo-thermal catastrophe is seen to be a straightforward 
instance of interaction-driven instability governed by theorem 1. Figure 1 shows the af- 
termath of a gravo-thermal catastrophe, the Cat's Eye nebula: the accelerating flows of 
energy have blown out the outer layers of the star, accentuating the core-halo structure. 
For a star with more than a few solar masses or for galaxy formation in the early uni- 
verse, the gravo-thermal catastrophe results in gravitational collapse of the core, and the 
formation of a black hole. With the formation of a black hole, energy flows from core 
to halo cease (except for a small amount of Hawking radiation). The black hole 'freezes' 
the previously hot core, and reverses the direction of energy flow, sucking up matter and 
energy from the halo. 

Core-halo instability in financial collapse 

Like galaxies or nebulae, the interbank payment transfer network possesses a core-halo 
structure [9-10], and is susceptible to interaction-driven instability. As detailed in [9], in 
2007 this network consisted of over 6600 financial institutions connected by over 70, 000 
daily transfers. Most of the institutions (the halo) had either few links or links whose 
transfers had only small volume. A small, highly connected fraction of the institutions 
(the core), accounted for most of the volume. On a typical day, for example, a core of 66 
institutions connected by 181 links comprised 75% of the value transferred [9]. The core 
itself contained an 'inner' core of 25 institutions that were almost fully connected. The 
core-halo structure of the network is shown in figure (2). Most important for stability 
analysis, the interbank payment transfer network is strongly disassortative [13]: highly- 
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connected banks do most of their business with sparsely-connected banks, and vice versa. 
The disassortative nature of the network means that there are fewer internal links within 
the core, and within the halo, than there are between core and halo. 

Disassortative networks are known to be less stable than assortative networks with 
respect to mixing and link removal [13]. The results of this paper can be applied to 
disassortative networks corresponding to the dynamics of coupled ordinary differential 
equations in general, and to the interbank transfer network in particular. Define a 
weighted disassortative network to be one in which the weighted sum of the links be- 
tween highly connected core and the sparsely-connected halo is greater than the average 
of the weighted sums of the links within the core and within the halo: J2iec,jeH \ c ij\ 2 > 
(1/2) Eijec \ a ij\ 2 + (I/ 2 ) J2ijeH \hj\ 2 - Theorem 1 then implies 

Theorem 2: A dynamical system whose gradient corresponds to a weighted disassortative 
network is unstable. 

Since the overall interbank network is disassortative, theorem 2 implies that stability 
can only be obtained when the banks in the core have significantly stronger interactions 
with each other than with banks in the halo. That is, even though the banks in the 
core undergo more transactions with banks in the halo than with each other, to maintain 
stability, typical flows between banks in the core and and other banks in the core must 
be significantly larger than typical flows between banks in the core and banks in the halo. 
This 'hot core' requirement for stability is confirmed by the data [9] - as noted, the core 
contains three quarters of the flow on a given day. Only by having large exchanges with 
each other (e.g., by hedging) can the banks within the core overcome the disassortative 
nature of the network to provide stability. 

The hot core requirement leaves the network vulnerable to interaction-driven instabil- 
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ity. Theorems 1 and 2 imply that if some event causes a sudden drop in the strength of 
transfer rates within the core, then the whole system can go unstable. The mathematical 
origin of this financial instability is the same as the origin of instability in gravo-thermal 
collapse, where a slowing of energy production in the core drives the system unstable. 
The end point of the financial instability is the well-known liquidity trap, a spectacular 
example of which occurred during the financial crisis of 2008-2009. For the bank transfer 
network, just as for black hole formation, instability leads to a collapsed regime in which 
the core freezes up, and transfers drop dramatically ('the black hole of finance'). 

Conclusion 

This paper presented a simple mathematical criterion for the stability of dynamical 
systems as interactions are added between subsystems. If the number and strength of 
interactions between subsystems grows too large, the criterion identifies a threshold of 
connectivity beyond which fluctuations inevitably grow. This result extends the May the- 
orem for random networks to structured networks. A number of artificial and naturally 
occurring dynamical systems, such as the gravitational and financial systems discussed 
here, are subject to this threshold. Indeed, any system within which the number and 
strength of interactions increase over time, without an attending increase in the strength 
of local stabilizing dynamics, will inevitably approach the interaction instability threshold. 
Once the instability threshold is passed, fluctuations grow and the dynamics eventually be- 
comes nonlinear [17-19]. Unless interactions between core and halo are reduced, and local 
stabilizing dynamics within the core and halo are increased, rapidly growing fluctuations 
will overwhelm physical and financial stabilization mechanisms leading to gravitational 
and financial collapse. 
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Supplementary material 

Definitions of stability: 

The definition of stability adopted here - all perturbations shrink - is stronger than 
stability in the sense of Lyapunov, in which perturbations can initially grow, but must 
eventually shrink [1-2]. In a time-independent linearized system, the latter requirement 
is equivalent to demanding that the eigenvalues of Vg have negative real parts. If the 
system is stable in the sense of Lyapunov, but G has positive eigenvalues, then some 
perturbations will grow before eventually dying out. The primary reason for adopting 
the stronger definition of stability is that for a large, complex system, the magnitude of 
the positive eigenvalues of G will typically scale as the size of the system, so that non- 
infinitesimal perturbations grow large very rapidly, violating the linearity assumptions, 
and taking the nonlinear system to a new and unpredictable regime. This scaling of 
the eigenvalues follows directly from theorem 1. Consider a family of systems G{n) of 
increasing system size n. If the ratio trC^C/y/ tiA 2 \/ trB 2 is equal to 1 + e for all n, and 
if the number of entries in A, B,C grow proporitional to n then the size of the largest 
eigenvalue of G{n) grows in proportion to system size. A second technical reason for 
adopting the stronger definition of stability is that Vg and G typically vary with time 
along the trajectory whose stability is being evaluated. For such time dependent systems, 
the condition that the eigenvalues of Vg have negative real parts at all times no longer 
guarantees stability, while the condition that G have negative eigenvalues continues to 
guarantee stability [2] . Accordingly, the stronger definition of stability that G is negative 
definite and that all perturbations shrink is an appropriate definition for the types of 
complex systems considered here. 
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G °ff = ( n\ n" ) • 



Proof of theorem 1: 
Let 

Ct 

The singular value decomposition for C implies that the eigenvalues of G Q ff are either 
zero, or come in pairs ±Aj, where the Xj > are the singular values of the matrix C. The 
±Aj eivenvectors of Go// take the form gf — ^ , where Wj and u,- are the left-singular 

and right-singular vectors for A.,-: Cvj = Xjilj, C^Uj = XjVj. 

(CXU ' \ 
j , where a, (3 are real and non-negative. 

Maximizing w^Gw over a, (3 yields w^Gw > when Xj > ajbj, where aj = UjAHj and 

bj = vjBvj. So the system is unstable if X 2 > ajbj for any j. In particular, if J2j a jbj < 

J2j Xp then the system is unstable. 

Note that aj, bj are the diagonal elements of A, B in the bases {uj} for A's n A - 

dimensional Hilbert space, and {vj} for _B's n^-dimensional Hilbert space. Let fx be the 

vector of eigenvalues of A, and z/be the vector of eigenvalues of B. It is straightforward to 

— * 

verify that the vectors a with components aj and b with components bj are related to fx and 
B by doubly stochastic transformations: a = WalI, b = Wbv. Convexity then implies that 
\a\ 2 = Ysjd) < \fl\ 2 = E^/if = tvA^A. Similarly, \b\ 2 = Ejtf < \u\ 2 = Ej"] = trB^B. 
These inequalities, combined with the Cauchy-Schwartz inequality, show that 

trC+C > VtrAWtrStS 

— >J2 x2 j > >\a\\b\>a:-b = Y / a jbj, (S2) 

j j 

and the system is unstable. This proves the theorem. 

Theorem 1 immediately implies a set of stability tests. Define a 2 = (l/n 2 A )tvA 2 = 



(l/nA)yJ2ijLi \ a ij\ 2 to be the average magnitude squared of the entries of A. a can be 
thought of as the 'strength' of A's stabilizing dynamics. Similarly, b = {l/n B )\JtiB 2 gives 
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the 'strength' of £Ts stabilizing dynamics, and c = (l/y/nAn B )VtrC^C is the strength 
of the potentially destabilizing dynamics of the interactions. Theorem 1 is equivalent to 
the statement that when c 2 > ab, interactions cause instability: the system is unstable 
if the strength of the destabilizing interaction dynamics is greater than geometric mean 
of the strengths of the stabilizing local dynamics. Similarly, c > (a + b)/2 > \fab, and 
c 2 > a 2 /2 + b 2 /2 > ab also imply instability. 

The bound of theorem 1 is tight in the sense that for a given C, and fixed a, b such 
that ab > c 2 , the entries of A and B can always be chosen to make the system stable. 
The 'minimal' strategy for attaining stability is align the eigenvectors of A and B with 
the left and right singular vectors of C . Arrange ft oc v, and jijUj = A 2 + e. Then the 
system is stable and 

VtrAWtrfitfi = trC+C + 0(e). {S3) 

Linearized equations for the gravo-thermal catastrophe: 

Consider a system bound together by gravitation such as a star, nebula, or galaxy. 
Such systems typically possess a core-halo structure [6]. Let Ea, Ta be the energy and 
temperature of the core, and Ca its specific heat. Similarly, let E B) T B and C B be the 
energy, temperature and specific heat of the halo, a > gives the linearized rate of 
energy transfer between core and halo as a function of their temperature difference, rj > 
governs heat production in the core, due, e.g., to nuclear reactions, and 7 > governs 
heat loss from the halo to space beyond. The linearized equations of motion are 

Eliminating Ea, E b then yields equation (4) of the text. 
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Instability of the bank transfer network: 

To derive the interaction-driven instability threshold for the bank transfer network, 
divide the network into the set of banks with above-average numbers of links and volumes 
(the core, system A), and those with below average numbers of links and volumes (the 
halo, system £>). Let Vij be the measured volume flow from bank j to bank % during a 
particular reporting period. To construct a linearized dynamics would require knowledge 
of Vj, the amount of funds held in bank j, together with the rates Vjj of creation and 
consumption of funds within the j'th bank. These numbers are not available from the data 
set analyzed in [9]. Even though Vj and Vjj are unknown, however, the stability analysis 
of theorem 1 can still be applied. In the linearized dynamics, the matrix Vg has entries 
Vij/Vj, and the Hermitian gradient G has entries = (vij/Vj + Vji/Vi)/2. The matrices 
A, B, and C, are derived from G as before: A governs the Hermitian dynamics within the 
core, B governs the dynamics within the halo, and C governs flows between core and halo. 
Let Ka be the fraction of non-zero terms within A, so that Ka^a * s the number of links 
within the core. Define Kb and kc in the same way. Let a 2 be the average magnitude 
squared of a non-zero term in A: a 2 = a 2 j 'ka, where as above a = (l/n A )VtrAfA is the 
average strength of all the terms in A, including those that are zero. Similarly, b 2 = b 2 /k b , 
c 2 = c 2 /kc are the average magnitude squared of non-zero terms in B and C. Theorem 
1 then implies that the dynamics are unstable if 

KqC 2 > ^KAKBfib. (S5) 

The disassortative nature of the network [9] now sets the stage for connectivity-driven 
instability: when the strength of internal stabilizing dynamics is insufficient, the dynamics 
of the network gives rise to unstable and increasing flows between core and halo. The 
disassortative nature of the network implies that there are fewer internal links within the 
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core, kati 2 A) and within the halo, KB"n B , than there are between core and halo, kcUaUb- 
That is, disassortativity implies Kq > k,a^b- Equation (S5) then implies theorem 2. 
In a core-halo system, stability requires that the strength of links within the core be 
significantly higher than the strength of links between core and halo, a feature observed 
in the actual bank transfer network (3/4 of the volume of transfers occurs within the 
core). 

If the system is marginally stable, so that kqc 2 ~ y/K^J^Bab, then any dip in the 
connectivity or the strength of connections within the core will drive it unstable. 
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Figure 1: After: Cat's Eye nebula - the aftermath of a gravo-thermal catastrophe. When 
a star burns through its nuclear fuel, the outgoing radiation pressure no longer suffices to 
support the star's weight, and it collapses. This collapse is an example of an interaction- 
driven core-halo instability, characterized by unstable flows of energy between core and 
halo, clearly seen in this image by Romano Corradi from the Nordic Optical Telescope 
(used with permission). 
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Figure 2: Before: The interbank transfer network in 2007. The US interbank transfer 
network consists of over 6600 financial institutions making over 70, 000 daily transfers. As 
mapped here from pre-financial crisis data, the network exhibits a pronounced core-halo 
structure (2a: reprinted with permission from reference [9]). The core of 66 institutions 
(2b) includes an inner core of 25 fully connected institutions, and accounts for 3/4 of the 
transfer volume. As with the gravo-thermal catastrophe, a slowdown of the core can drive 
the entire system unstable, leading to the financial analogue of gravitational collapse ('the 
black hole of finance'). 



18 



